How to mitigate Active Directory attacks that use the KrbRelayUp toolset
Attackers are using the KrbRelayUp toolset to compromise Kerberos in on-premises Active Directory networks. This two-step process should protect you.
Powermad Sharpmad Directory Service Active Directory Domain Naming Binding Token Lightweight Directory Access
Source: csoonline.com